This relates to what's been discussed on the razor & dcc issue.  I may
provide people in this list an idea of where Vipul's going since someone
mentioned that they weren't certain on the project status for razor. 

-----Original Message-----
From: Vipul Ved Prakash [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, March 05, 2002 3:46 AM
To: Rose, Bobby
Cc: [EMAIL PROTECTED]
Subject: Randomized spam, etc.


On Mon, Mar 04, 2002 at 02:32:51PM -0500, Rose, Bobby wrote:
> Also, I'm seeing spam messages
> with unique lines at the tail of the message body which would generate

> it's own unique hash.  The unique line is also the id in the To field.

I am aware of the random string at bottom thing. A while ago I posted an
idea to the list under the subject of "ephemeral hashes". The idea in
brief is to hash text from random offsets of the spam message. Since the
offsets would be random and change every 48 or so hours, spammers would
be unable to predict where they should put the randomized strings, and
most of the time their randomized strings will be ignored by the hashing
algorithm. More details about how this would work are in the mailing
list archives.

Nilsimsa signatures is a different approach, but a step in the same
direction. Again, you should find information about it in the archives.
The protocol I am working on at the moment allows use of different
"engines" which are essentially filtering mechanisms based on different
hashing schemes. The next version of Razor will support SHA1 (as VR1
engine), nilsimsa (as VR2) and ephemeral signatures (as VR3). Clients
will be able to choose which engine they want to use. They could even
use multiple engines in conjunction with SA.

cheers,
vipul.

-- 

Vipul Ved Prakash         |  "... and debugging is sort of like a 
Software Design Artist    |   commitment-free relationship, isn't it?"
http://vipul.net/         |                   -- Rishab Aiyer Ghosh


_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to